Tech Giant HP Enterprise Hacked by Russian Hackers Linked to DNC Breach

Hackers with links to the Kremlin are suspected to have infiltrated information technology company Hewlett Packard Enterprise's HPE cloud email environment to exfiltrate mailbox data. "The threat actor accessed and exfiltrated data beginning in May 2023 from a small percentage of HPE mailboxes...

LinkWeChat Security Breach

LinkWeChat is an open source SCRM system based on enterprise WeChat. A security vulnerability exists in LinkWeChat version 5.1.0, which stems from the parameter name in the file /linkwechat-api/common/download/resource that causes path traversal...

MAL-2024-852 Malicious code in wlwz-2312-7507 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d9294f70d449bd920d7147923a8647597c10d30f5c8e64fc260f827fe2a4430 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-901 Malicious code in wlwz-2312-8102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38d4ba8d8347a741afe930d1a57480d1b2674554816cfec9be4f6b247db6b2a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-759 Malicious code in wlwz-2312-6504 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29bf7c8ee72f6e6364abd7b7fcdc739c1e8786eac6d0445b7b558afa32dc21a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-763 Malicious code in wlwz-2312-6508 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 684c80c9199b5e09903a30dc5ae3a2b20a2986e9a88321451fd678adc5bfaf16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-603 Malicious code in wlwz-2312-4801 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0d013be48e7b64278808c5e0b8ebb58623605af677a0711bd9626039f6b864e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-600 Malicious code in wlwz-2312-4707 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9570305fd15aa43d32dfa404dc8e107b9af226559abd3c1781e32d3672a96536 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-440 Malicious code in wlwz-2312-3000 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fcf14fd0d80ab5b58044ad2d8faf523f93ab0d0d6500b6a0804284024d9686b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-331 Malicious code in wlwz-2312-1708 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b00585b27b904bc0a6e2ad2a6766cd0c85a1a85413b7cb4d021533909f014f45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-281 Malicious code in wlwz-2312-1203 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84e04c90cf0ae007bb5d45d3c44555ed1238647d8616732ee294852cd57ae3e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-0705 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73f3954b573d83dd29c8986e3c1ba516c13334ae09ce7a131397594793f4eab0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Jason’s Deli Data Breach Exposes 344,000 Users in Credential Stuffing Attack

By Waqas The data breach occurred a few days before Christmas on December 21, 2023, but the details have only been revealed now. This is a post from HackRead.com Read the original post: Jasons Deli Data Breach Exposes 344,000 Users in Credential Stuffing Attack...

Global Retailer BuyGoods.com Leaks 198GB of Internal and User PII, KYC data

By Waqas Hailing from Wilmington, Delaware BuyGoods.com boasts a user base of 3 million consumers spanning across 17 countries. This is a post from HackRead.com Read the original post: Global Retailer BuyGoods.com Leaks 198GB of Internal and User PII, KYC data...

10 years on from the Target breach. Has building cyber security improved?

It’s over a decade since the Target data breach. It was an event that reinforced the need for supply chain security reviews. It seems that much has changed since then, or has it? Has the security profile of the average connected building in the USA improved in that time period, be it retail,...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification by compromising a channel access token...

Orthanc Security Breach

Orthanc is a free and open source software from Orthanc. A security vulnerability exists in versions of Orthanc prior to 1.12.2 that stems from vulnerability to reflective cross-site scripting XSS attacks...

The vulnerabilities of the Content Access SDK, Image Export SDK, PDF Export SDK, and HTML Export SDK components of Oracle Outside In Technology’s software development kit (SDK) allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of the Content Access SDK, Image Export SDK, PDF Export SDK, and HTML Export SDK components of Oracle Outside In Technology’s software development kit SDK exist due to insufficient testing of input data. Exploiting these vulnerabilities can allow attackers to compromise the...

LibRaw: stack buffer overflow in LibRaw_buffer_datastream::gets() in src/libraw_datastream.cpp

A flaw was found in the LibRaw package. A stack buffer overflow in the LibRawbufferdatastream::gets function in src/librawdatastream.cpp caused by a maliciously crafted file may result in compromised confidentiality and integrity and an application crash...

“The mother of all breaches”: 26 billion records found online [Updated]

Security researchers have discovered billions of exposed records online, calling it the "mother of all breaches". However, the dataset doesnt seem to be from one single data breach, but more a compilation of multiple breaches. These sets are often created by data enrichment companies. Data...